From d6fd9457e155eadceb4d68430912af8bad27fc5e Mon Sep 17 00:00:00 2001 From: Ricardo Branco Date: Wed, 25 Feb 2026 13:12:24 +0100 Subject: [PATCH] tests/int: Disable coredumps for SCMP_ACT_KILL tests SCMP_ACT_KILL terminates the process with a fatal signal, which may produce a core dump depending on the host configuration. While this is harmless on ephemeral CI instances, it can leave unwanted core files on developer or customer systems. It also interferes with test environments that detect unexpected core dumps. Signed-off-by: Ricardo Branco (cherry picked from commit f18e97d312f31f109c5ef2485b62cad04e819529) Signed-off-by: Kir Kolyshkin --- tests/integration/seccomp.bats | 2 ++ 1 file changed, 2 insertions(+) diff --git a/tests/integration/seccomp.bats b/tests/integration/seccomp.bats index db9571e0d..b5ed47dbc 100644 --- a/tests/integration/seccomp.bats +++ b/tests/integration/seccomp.bats @@ -155,6 +155,7 @@ function flags_value() { @test "runc run [seccomp] (SCMP_ACT_KILL)" { update_config ' .process.args = ["/bin/sh", "-c", "mkdir /dev/shm/foo"] | .process.noNewPrivileges = false + | .process.rlimits = [{"type": "RLIMIT_CORE", "soft": 0, "hard": 0}] | .linux.seccomp = { "defaultAction":"SCMP_ACT_ALLOW", "architectures":["SCMP_ARCH_X86","SCMP_ARCH_X32","SCMP_ARCH_X86_64","SCMP_ARCH_AARCH64","SCMP_ARCH_ARM"], @@ -173,6 +174,7 @@ function flags_value() { "architectures":["SCMP_ARCH_X86","SCMP_ARCH_X32","SCMP_ARCH_X86_64","SCMP_ARCH_AARCH64","SCMP_ARCH_ARM"], "syscalls":[{"names":["mkdir","mkdirat"], "action":"SCMP_ACT_KILL"}] } + | .process.rlimits = [{"type": "RLIMIT_CORE", "soft": 0, "hard": 0}] | .hooks = { "startContainer": [ { "path": "/bin/sh",